Mohammed Kaludi AMP for WP – Accelerated Mobile Pages

CVE-2026-97019 High 7.2 AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute 0.2%
CVE-2026-83591 High 7.2 AMP for WP <= 1.1.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content Regex Transformation 0.3%
CVE-2026-6101 High 7.5 AMP for WP <= 1.1.12 - Authenticated (Author+) Arbitrary File Write via Role-Based Access Configuration with Local Font Upload 1.0%
CVE-2026-0627 Medium 6.4 AMP for WP <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload 0.2%
CVE-2025-14468 Medium 4.3 AMP for WP – Accelerated Mobile Pages <= 1.1.9 - Cross-Site Request Forgery to Comment Submission 0.2%
CVE-2024-11254 Medium 6.1 AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scripting 0.3%
CVE-2024-9598 High 8.8 AMP for WP – Accelerated Mobile Pages <= 1.0.99.1 - Cross-Site Request Forgery to Privilege Escalation 0.3%
CVE-2024-6896 Medium 6.4 AMP for WP – Accelerated Mobile Pages <= 1.0.96.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
CVE-2024-1043 Medium 6.5 AMP for WP <= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_data 0.7%
CVE-2024-0587 Medium 6.1 Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting 0.4%
CVE-2023-6782 Medium 6.4 AMP for WP – Accelerated Mobile Pages <= 1.0.92 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode 0.4%